start::
CreateRestorePoint:
CloseProcesses:
RemoveProxy:
HKU\S-1-5-21-4005071821-185642077-3497638136-1000\...\Run: [EpicGamesLauncher] => F:\JEUX\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
Task: {0AB95945-D713-4667-B32B-3F616246CDD2} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (Pas de fichier)
Task: {134C8FA6-4BCF-4158-8A0E-E67C8768765B} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Pas de fichier)
Task: {1B507C5B-EBEC-467D-8DD5-E4E5E003E471} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Pas de fichier)
Task: {BADAF6DB-007B-4175-A110-D1238B9D5CFB} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (Pas de fichier)
Task: {E9EC3F91-6B6A-42B1-AD29-901D26EAAFB8} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
FF Plugin HKU\S-1-5-21-4005071821-185642077-3497638136-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Pas de fichier]
2022-02-20 00:19 - 2022-02-20 00:19 - 000000223 ____C C:\Users\Ounass\Desktop\Lost Ark.url
2022-02-20 19:39 - 2013-01-02 18:02 - 000000000 ___DC C:\Users\Ounass\AppData\Local\Ubisoft Game Launcher
2016-10-19 21:12 - 2016-10-19 21:12 - 002465792 _____ () C:\Users\Ounass\ZHPCleaner.exe
DPF: HKLM-x32 {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: HKLM-x32 {CAFEEFAC-0018-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
DPF: HKLM-x32 {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_31-windows-i586.cab
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
EmptyTemp:
cmd: cscript %windir%\System32\slmgr.vbs /dli
cmd: DISM /Online /Cleanup-image /Restorehealth
cmd: netsh winsock reset
end::